Research And Application Of Access Control Model About Integrated Authentication And Flexible Authorization

With the expansion of the scale an increasing number of suppliers, experts in various fields and users participate in the military material procurement activities. Military material procurement involves national and military security and confidentiality, which requires the Military Material Procurement Information Technology Platform (MMPITP) have the capacity that it can provide efficient service for all types of users and effective user management and conservative military secrets. It demands a great deal of efficiency and reliability and security of the platform. Traditional security mechanisms can't meet the demand.For the architecture and the special security requirements of the MMPITP, this thesis studied the principles, the basic methods of the realization, the common models and the typical cases of Single Sign-On (SSO) and access control technology, focused on the study of the Security Assertion Mark-up Language (SAML) specifications, the Extensible Access Control Mark-up Language (XACML) specifications and the relationship between them and studied the existing access control model to find its advantages and disadvantages. On the base of the analysis and the actual requirements of the MMPITP this thesis proposed and designed a new access control solution about integrated authentication and flexible authorization based on SAML and XACML.The thesis adopts pull model and push model of SAML to achieve SSO. The portal provides identity authentication and produces authentication assertions. Based on the trust between the web sites and the portal, users can access all the authorized...